home

$ftax.exe

National Tax Service

Publisher:
국세청/서비스  (signed by National Tax Service)

Version:
2014.1.1.4

MD5:
a98d0a03ae96d3d36a2d6315921ef3c9

SHA-1:
cb90440335925c41d956f4c2c20e5f1c14ea011b

SHA-256:
d870a4df8073ddc57cb13ff516d418a72faac048caf2978823f1bdb5a37840fb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/1/2025 1:03:00 AM UTC  (today)

File size:
8.2 MB (8,591,680 bytes)

Product version:
2014.1.1.4

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ftax\$ftax.exe

Digital Signature
Signed by:
National Tax Service

Authority:
Thawte, Inc.

Valid from:
11/12/2014 9:00:00 AM

Valid to:
2/13/2016 8:59:59 AM

Subject:
CN=National Tax Service, OU=IT Team, O=National Tax Service, L=Jongno-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2658FBC9E2DF822D97750B81D6799261

File PE Metadata
Compilation timestamp:
11/26/2014 10:02:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:E5gs3WexCeQMQ4gf3jYG5GU2XVWz8NyH2/Re5OvLKCgpbP+Hom0u95Tx4+KMc63k:EFVx7Qnf3jYG5GU2Az8N9LKtg3x4ic6U

Entry address:
0x3D9BCC

Entry point:
55, 8B, EC, B9, 0E, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, B8, AC, DD, 7C, 00, E8, CC, 1C, C3, FF, 33, C0, 55, 68, 60, A0, 7D, 00, 64, FF, 30, 64, 89, 20, B8, A4, A9, 7E, 00, 33, C9, BA, 14, 01, 00, 00, E8, BD, B2, C2, FF, C7, 05, A4, A9, 7E, 00, 14, 01, 00, 00, 68, A4, A9, 7E, 00, E8, 19, 34, C3, FF, 83, 3D, B4, A9, 7E, 00, 02, 75, 10, 83, 3D, A8, A9, 7E, 00, 06, 72, 07, BB, 01, 00, 00, 00, EB, 02, 33, DB, E8, 89, AA, C2, FF, 48, 0F, 8C, B8, 01, 00, 00, 8D, 55, EC, B8, 01, 00, 00, 00, E8, D5...
 
[+]

Entropy:
7.1443

Developed / compiled with:
Microsoft Visual C++

Code size:
3.8 MB (4,032,512 bytes)

Scan $ftax.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.